allow to enable security in devmode

[maxandersen]

with ngrok security checks should still work -but for now security is always disabled.

related to #610

[gsmet]

How do you configure things for ngrok exactly?

[maxandersen]

See https://docs.quarkiverse.io/quarkus-ngrok/dev/index.html until and including stable url.

I also use the next step so I don't have to the domain step in every app but is not required.

So in short:

Add ngrok ext.
Get auth token and set it (.token)
Get stable domain url and set it (.domain)

Run in Quarkus dev.

[gsmet]

Apparently smee.io can also push the rawdata now so we could probably enable security now: probot/smee.io@8c33d74

[gsmet]

Did some work here but still pending some smee.io changes: #659